In my experience this person exists and is common, and someone has set up an MCP for them.

> in which case, oh god, they're letting the bot write and execute brand new SQL everry daOh god oh god

Yeah, also this.